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IN THE CLAIMS 
Please amend the claims as follows: 

Claim 1 (Currently Amended): A packet cryptographic processing proxy apparatus 
connect e d b e tw ee n th e Int e rn e t and a t e rminal , comprising: 

a cryptographic communication channel information storage part which stores 
cryptographic communication channel information used for establishing a cryptographic 
communication channel at least for packet communication on the Internet or in pack e t 
communication between a counterpart apparatus connected to the Internet and the terminal; 

a cryptographic processing part which performs cryptographic processing for a 
received packet, which is forwarded from the counterpart apparatus to the terminal or from 
the terminal to the counterpart apparatus, based on the cryptographic communication channel 
information stored in said cryptographic communication channel information storage part; 

a packet determination part which determines whether the received packet requests 
agreement with the counterpart apparatus on cryptographic communication channel 
information , from th e r e c e ived packet, wh e th e r or not to agree with th e counterpart apparatus 
on cryptographic communication chann e l information for establishing a packet 
communication channel between the counterpart apparatus and the terminal; and 

a cryptographic communication channel information agreement part which, if the 
packet determination part determines that the received packet requests the agreement 
n e c e ssity of agr ee m e nt , makes the agreement and stores the agreed cryptographic 
communication channel information in said cryptographic communication channel 
information storage part,, 

wherein the packet cryptographic processing proxy apparatus is connected between 
the Internet and the terminal and has no IP address. 
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Claim 2 (Previously Presented): The packet cryptographic processing proxy 
apparatus according to Claim 1, further comprising: 

a filter information storage part which stores sending source identification 
information, sending destination identification information, protocol information indicating a 
packet communication procedure and processing instruction information indicating whether 
or not to perform cryptographic processing, as filter information; and 

a cryptographic processing determination part, which, by referring to said filter 
information storage part based on filter information in the packet received by the packet 
cryptographic processing apparatus, determines whether or not to perform cryptographic 
processing of the received packet by said cryptographic processing part based on the 
processing instruction information. 

Claim 3 (Previously Presented): The packet cryptographic processing proxy 
apparatus according to Claim 1 , further comprising a received packet determination part 
which determines whether or not a received packet from the counterpart apparatus, which is 
forwarded to the terminal, is valid. 

Claim 4 (Original): The packet cryptographic processing proxy apparatus according 
to Claim 1, wherein said cryptographic communication channel information storage part 
includes a detachable, tamper-proof device in which at least part of the cryptographic 
communication channel information is stored. 

Claim 5 (Original): The packet cryptographic processing proxy apparatus according 
to Claim 1 , wherein said cryptographic communication channel information storage part 
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includes a storage medium in which at least part of the cryptographic communication channel 
information is changeable. 

Claim 6 (Previously Presented): The packet cryptographic processing proxy 
apparatus according to any one of Claims 1 to 5, being logically directly connected to a 
network interface device of the terminal. 

Claim 7 (Canceled). 

Claim 8 (Previously Presented): The packet cryptographic processing proxy 
apparatus according to any one of Claims 2 to 5, further comprising a terminal information 
collection part which collects a part of at least one of the cryptographic communication 
channel information and the filter information and stores the at least one of the cryptographic 
communication channel information and the filter information in said filter information 
storage part. 

Claim 9 (Previously Presented): The packet cryptographic processing proxy 
apparatus according to Claim 1, further comprising, 

a key information setting part which sets key information for performing 
cryptographic processing of a packet, in the cryptographic communication channel 
information agreed by said cryptographic communication channel information agreement 
part, for the terminal . 

Claim 10 (Previously Presented): The packet cryptographic processing proxy 
apparatus according to Claim 9, wherein, if determining necessity of agreement on 
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cryptographic communication channel information, said packet determination part determines 
whether valid cryptographic communication channel information corresponding to the 
received packet is stored in said cryptographic communication channel information storage 
part, causes said key information setting part to set key information in the cryptographic 
communication channel information for the terminal if the valid cryptographic 
communication channel information is stored, and causes said cryptographic communication 
channel information agreement part to make an agreement on cryptographic communication 
channel information if the valid cryptographic communication channel is not stored. 

Claim 1 1 (Original): The packet cryptographic processing proxy apparatus according 
to Claim 1 0, wherein, if said packet determination part determines necessity of agreement on 
the cryptographic communication channel information, and address information in the 
received packet is stored in said filter information storage part, said packet determination part 
causes agreement on the key information to be made. 

Claim 12 (Original): The packet cryptographic processing proxy apparatus according 
to Claim 1 1, further comprising a terminal information acquisition part which detects the 
terminal, acquires address information from the terminal and stores the acquired address 
information in said filter information storage part. 

Claim 13 (Currently Amended): A packet cryptographic processing method 
implemented on a packet cryptographic processing proxy apparatus which is connected 
between the Internet and a terminal and which has no IP address, comprising the steps of: 

(a) storing cryptographic communication channel information used for establishing a 
cryptographic communication channel at least for packet communication on the Internet or in 
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pack e t communication between a counterpart apparatus connected to the Internet and [[a]] the 
terminal, in a cryptographic communication channel information storage part under 
agreement with the counterpart apparatus; and 

(b) performing cryptographic processing for a received packet, which is forwarded 
from the counterpart apparatus to the terminal or from the terminal to the counterpart 
apparatus, based on the cryptographic communication channel information; 

wherein the step (a) comprises the steps of: 

(a-1) determining whether the received packet requests agreement with the 
counterpart apparatus on the cryptographic communication channel information wh e th e r or 
not th e r e c e iv e d pack e t r e quir e s agr ee m e nt on cryptographic communication chann e l 
information and, if the received packet requests agreement agr e em e nt is r e quir e d , making the 
agreement, for packet communication between [[a]] the counterpart apparatus conn e ct e d to 
th e Int e rn e t and [[a]] the terminal , with the counterpart apparatus on the cryptographic 
communication channel information for p e rforming cryptographic proc e ssing of a pack e t 
transmitt e d with th e count e rpart apparatus ; and 

(a-2) if the received packet does not request agreement agre e m e nt is not r e quired , 
bypassing or discarding the received packet. 

Claim 14 (Original): The packet cryptographic processing method according to 
Claim 13, wherein the step (b) comprises the steps of: 

(b-1) by referring to a filter information storage part based on filter information in the 
received packet, determining whether or not to perform cryptographic processing for the 
received packet; and 

(b-2) causing the cryptographic processing to be performed if it is determined by the 
determination that cryptographic processing is to be performed, and causing the received 
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packet to immediately pass or to be discarded if it is determined by the determination that 
cryptographic processing is not to be performed. 

Claim 15 (Previously Presented): The packet cryptographic processing method 
according to Claim 13, wherein the step (a) further comprises: 

(a-3) setting the agreed cryptographic communication channel information for the 
terminal. 

Claim 16 (Previously Presented): The packet cryptographic processing method 
according to Claim 13, wherein the step (a-1) comprises the steps of: 

(a-1-1) determining whether valid cryptographic communication channel information 
corresponding to the received packet is stored in the cryptographic communication channel 
information storage part; and 

(a- 1-2) if the cryptographic communication channel information is stored, setting key 
information in the cryptographic communication channel information for the terminal; and, if 
the cryptographic communication channel information is not stored, making agreement on the 
cryptographic communication channel information, storing the agreed cryptographic 
communication channel information in the cryptographic communication channel 
information storage part as well as setting the agreed cryptographic communication channel 
information for the terminal. 

Claim 17 (Original): The packet cryptographic processing method according to 
Claim 16, wherein the step (a-1-1) comprises a step of, if agreement on cryptographic 
communication channel information for the packet is required, determining first whether 
address information in the received packet is stored in a filter information storage part; and, if 
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the address information is stored, performing the determination about whether valid 
cryptographic communication channel information is stored in the cryptographic 
communication channel information storage part. 

Claim 18 (Currently Amended): A r e adabl e r e cording m e dium on which a program 
for causing a comput e r to p e rform th e pack e t cryptographic proc e ssing m e thod according to 
any on e of Claims 13, 1 4 , 16 and 17 is r e cord e d 

A computer readable storage medium encoded with computer executable instructions, 
which when executed by a packet cryptographic processing proxy apparatus which is 
connected between the Internet and a terminal and which has no IP address, cause the packet 
cryptographic processing proxy apparatus to perform a method comprising: 

(a) storing cryptographic communication channel information used for establishing a 
cryptographic communication channel at least for packet communication on the Internet 
between a counterpart apparatus connected to the Internet and the terminal, in a cryptographic 
communication channel information storage part under agreement with the counterpart 
apparatus; and 

(b) performing cryptographic processing for a received packet, which is forwarded 
from the counterpart apparatus to the terminal or from the terminal to the counterpart 
apparatus, based on the cryptographic communication channel information; 

wherein the step (a) comprises the steps of: 

(a- 1 ) determining whether the received packet requests agreement with the 
counterpart apparatus on the cryptographic communication channel information and, if the 
received packet requests agreement, making the agreement, for packet communication 
between the counterpart apparatus and the terminal on the cryptographic communication 
channel information; and 
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(a-2) if the received packet does not request agreement, bypassing or discarding the 
received packet . 
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